Session Adoption for Multi-Data Center SSO Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a multi-data center system, the session activity for single sign-on (SSO) access is split between different data centers for authentication and authorization, leading to session inactivity detection issues, where one data center may expire the SSO session even if the user is active on another data center, requiring re-authentication.
Innovation Solution
Implementing session adoption techniques where a first data center manages session activity across multiple data centers by obtaining and tracking session activity data from adopted sessions, allowing it to determine if the SSO session is active across the system and prevent unnecessary re-authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple sessions are created for user authentication and authorization across different data centers, then access to multiple resources is enabled, but session activity becomes split and inactivity detection becomes inaccurate
Solution Approach 1:
The patent merges session activity tracking across multiple data centers by having each data center adopt and track sessions from other data centers. The session adoption mechanism combines fragmented session information into a unified view, allowing accurate inactivity detection even when users access resources across multiple geographically dispersed data centers. This resolves the contradiction by maintaining access versatility while achieving precise session activity measurement through centralized session management.
2Stability of the object's composition
If separate sessions are created at each data center for authentication and authorization, then data center independence is maintained, but unnecessary re-authentication occurs
Solution Approach 1:
The patent implements feedback mechanisms where data centers continuously monitor session activity and provide feedback about session status to other data centers. When a user is detected as inactive in one data center, the system feedbacks this information to other data centers, allowing them to automatically expire sessions without requiring user re-authentication. This maintains data center independence while eliminating redundant re-authentication steps, resolving the contradiction between structural independence and operational efficiency.
3Device complexity
If session activity is tracked at each data center independently, then implementation complexity is reduced, but session expiration becomes inconsistent
Solution Approach 1:
The patent makes each data center's session tracking system universal by enabling them to perform both local session tracking and adoption of sessions from other data centers. This multi-functional approach allows simple, independent implementations at each data center while achieving consistent session expiration behavior across the entire multi-data center system. The session adoption protocol provides the universal mechanism that bridges independent implementations, resolving the contradiction between implementation simplicity and expiration consistency.
Data Source
AI summary
Techniques are disclosed for managing session activity of SSO access across multiple data centers. Session activity of SSO access is managed across multiple geographically disperse computing systems clustered together to form a multi-data center (MDC) system. A first data center in the MDC system may implement session adoption to manage an SSO session of the user in the MDC system. Information about subsequent sessions established by other data centers may be adopted by the first data center. The first data center may obtain session activity data from each session that is adopted for the user. The session activity may be used to determine whether SSO session is active for the user across data centers in the MDC system. Authorization to access a resource at any data center in the MDC system may be granted based on the status of the SSO session using session adoption among the data centers.